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IN THE CLAIMS 



(cancelled) 



Please add the following new claims: 



24. A n^ethod of assessing a financial fraud risk within a distributed client/server system, said 
method comprising: 

receiving first and second financial transactions from transactional information sources at 
a central copiputer system; 



generating first features for said first financial transaction at said central computer 



system; 



generating second features for said second financial transaction at said central computer 

system; 

i 

determining feature changes between said first features and said second features at said 

central computer system; 
i 

encjypting said feature changes at said central computer system; 

transmitting said encrypted feature changes from said central computer system to a client 
computer system; 

receiving a local, current financial transaction at a client computer system; 

encjypring said current transaction at said client computer system; 

generating local features from said encrypted current transaction at said client computer 

system; 
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com; taring said local features to said received feature changes at said client computer 
system; and 

scorjng the result of said comparing to produce a fraud risk value associated with said 
local, current financial transaction, whereby the risk associated with said current financial 
transaction |s assessed in a distributed manner. 



25. A method as recited in claim 24 wherein said generating said first features, generating 
said second j features and said generating local features all include incorporating probability 
information' into said first, second and local features. 

j 

■ 
i 

26. A method as recited in claim 24 wherein said scoring is performed using a risk prediction 
model 

I 



27. A nfcthod as recited in claim 24 wherein said local, current transaction includes at-sourcc 
data not generally available to said central computer system. 



28. A njethod as recited in claim 24 wherein said first financial transaction, said second 
financial transaction and said current transaction all relate to the same financial account. 



29. A njethod as recited in claim 24 further comprising: 

generating secondary features for said first financial transaction; 

generating secondary features for said second financial transaction; 

determining secondary feature changes between said secondary features of said first and 
second financial transactions; 

encrypting said secondary feature changes; and 
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trans fitting said encrypted secondary feature changes from said central computer system 
to said client computer system. 



30. A method as recited in claim 24, further comprising: 

generating enhanced features as result of said comparing; and 
transmitting said enhanced features to said central computer system. 



31. A distributed risk assessment system for assessing a financial fraud risk, said system 
comprising^ 

a trjnsaction engine that produces first and second financial transactions; 

a profiling engine of a central computer system that receives said first and said second 
financial transactions and generates first features and second features of said financial 
transactions respectively; 

a chistering engine of said central computer system that stores said first features and said 
second features into a cluster database; 

a replication engine of said central computer system that determines feature changes 
between said first features and said second features, and encrypts said feature changes; 

a diabase of a client computer system that stores said encrypted feature changes; 



a lo 

said curren: 
local enginp 
result to 
whereby 
manner. 



ths 



^al engine of said client computer system that receives a current transaction, encrypts 
transaction, and generates local features from said current transaction, wherein said 
also compares said local features to said encrypted feature changes and scores the 
produce a fraud risk value associated with said local, current financial transaction, 
risk associated wiih said current financial transaction is assessed in a distributed 
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32. A sMstem 
local features 



as recited in claim 31 wherein said first features, said second features and said 
include probability information. 



33. A system as recited in claim 3 1 further comprising: 

a risk prediction model of said client computer system used to produce said fraud risk 
value. i 



34. A system as recited in claim 3 1 wherein said current transaction includes at-source data 
noi generally available to said central computer system. 



35. A system as recited in claim 31 wherein said first financial transaction, said second 
financial transaction and said current transaction all relate to the same financial account. 



36. A s jLtem as recited in claim 3 1 wherein said clustering engine further generates 
secondary features for said first financial transaction and secondary features for said second 
financial transaction and wherein said replication engine further determines secondary feature 
changes between said secondary features of said first and second financial h-ansactions, and 
wherein said replication engine further encrypts said secondary feature changes and transmits 
said encrypjed secondary feature changes from said central computer system to said client 
computer system. 



37. A system as recited in claim 3 1 wherein said local engine of said client computer system 
further generates enhanced features as result of said comparing and transmits said enhanced 
features to s aid central computer system. 
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